Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa
File: AS200226.roa (raw, json)
Hash identifier: GM2c+qeJq7DoyzAvE+CPCxw+/u1L86t5qiwCh+LBMTY=
Subject key identifier: C9:A1:1C:ED:9A:27:82:FB:2A:52:84:6F:B2:05:9E:7C:4D:CD:28:79
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 1316C4342B7657E2BF48125B932971564A526903
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa
Signing time: Sun 06 Oct 2024 04:45:20 +0000
ROA not before: Sun 06 Oct 2024 04:40:20 +0000
ROA not after: Sun 05 Oct 2025 04:45:20 +0000
asID: 200226
IP address blocks: 2a0a:6040:3a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:16:c4:34:2b:76:57:e2:bf:48:12:5b:93:29:71:56:4a:52:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Oct 6 04:40:20 2024 GMT
Not After : Oct 5 04:45:20 2025 GMT
Subject: CN=C9A11CED9A2782FB2A52846FB2059E7C4DCD2879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:04:17:bf:6f:56:26:9b:5b:b8:63:c2:66:
20:e0:0c:db:eb:d8:94:17:fe:41:bc:9a:73:49:58:
61:c2:4f:d7:d4:5b:0b:9f:b1:4d:98:2e:fd:7e:76:
71:e1:06:14:f6:07:75:67:67:f8:f3:97:48:4f:de:
6d:f5:d7:b3:e8:60:ed:39:2d:30:3c:86:ae:15:9c:
6b:ec:d3:31:15:21:3e:f6:3a:1d:e5:f6:7c:ab:20:
08:58:dc:b2:f4:44:01:90:ed:3a:79:67:3a:d8:cf:
2b:2f:b2:67:fc:ab:00:a5:7c:18:1f:34:e3:34:ca:
5f:06:12:b5:b5:15:7a:a0:18:4f:e7:15:49:f7:bb:
0e:24:e3:26:fd:da:76:a4:86:72:01:35:3a:6d:ef:
b2:bc:06:1d:23:c9:25:b3:95:19:c7:af:16:a9:cf:
f7:5b:ad:52:ab:0d:d9:05:16:9a:9c:c8:17:31:d6:
42:cf:3a:ee:d0:6f:4f:07:f0:c9:c8:bd:e2:60:4d:
3f:2c:91:60:36:f7:ef:3f:69:f6:10:7f:7c:6a:86:
12:d0:bd:a2:0e:ea:15:fa:97:37:27:7f:0b:c7:3c:
a9:23:57:6f:b1:40:df:1f:07:fc:f9:bb:96:37:8d:
f9:15:9d:e6:bc:ba:b8:9b:bc:90:16:da:bd:c5:20:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:1C:ED:9A:27:82:FB:2A:52:84:6F:B2:05:9E:7C:4D:CD:28:79
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
ae:c1:9c:0a:7e:d0:59:6e:10:39:33:95:d3:55:28:01:c4:79:
4d:80:37:5e:d4:89:8f:18:59:21:90:28:8f:7c:d2:1a:d9:f9:
37:69:a1:9f:69:93:23:5c:f4:84:16:13:c1:a0:f6:3a:de:70:
9e:6a:17:e3:e6:90:da:25:a2:d4:eb:f8:f2:9c:c2:e3:ec:91:
00:d5:f0:6f:47:5a:49:93:63:0b:87:04:cb:cc:90:2b:58:eb:
89:04:b0:d9:b7:04:54:14:11:96:b0:df:98:a7:41:ab:d0:b5:
39:4a:cb:ec:7a:0c:fb:72:8c:9c:bf:e4:c5:39:f2:64:d6:22:
3f:39:41:b3:05:2c:07:08:70:94:63:16:e7:0f:92:ae:48:83:
63:1b:96:e5:be:3a:0d:2e:db:9f:49:fd:80:6f:5a:cd:93:57:
f9:24:60:fb:50:47:1a:c3:15:35:74:dc:40:08:8b:5f:fd:4c:
c6:5d:7c:fa:be:aa:6f:67:7f:f8:25:39:92:21:8d:c0:3e:c7:
10:be:fd:8e:79:63:e7:fe:e1:4f:fb:21:5f:08:70:d4:f3:59:
7e:f9:81:85:2f:3e:1b:84:c0:53:a9:9a:b3:2e:4b:f6:54:68:
0d:6e:80:28:0d:af:9b:a0:15:b6:4f:71:18:67:64:6c:a3:ae:
a5:4c:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:24:48 2025 by rpki-client